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RECEIVE REQUEST 
FOR IMPLEMENTATION 
OF A SERVICE 
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f 




DETERMINE RESTRICTION(S) 
IF ANY, TO BE IMPOSED 
ON REQUESTED 
IMPLEMENTATION 
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DYNAMICALLY 
CONSTRUCT REQUESTED 
IMPLEMENTATION 
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PROVIDE REQUESTED 
IMPLEMENTATION 
TO APPLICATION 
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TO 448 TO 440 
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INSTANTIATE 
WRAPPER OBJECT 



ENCAPSULATE 
RESTRICTIONS AND 
INSTANCES WITHIN 
WRAPPER OBJECT 



PROVIDE CIPHER 
INSTANCE TO 
APPLICATION 



s 



456 



4GB 
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DEFAULT SET 

(1) ALGORITHM NAME: BLOWFISH 

EXEMPTION MECHANISM : 
MAX KEY SIZE: 128 BITS 
OTHER LIMITATION (S) : 

(2) ALGORITHM NAME: DES 

EXEMPTION MECHANISM : 
MAX KEY SIZE: 128 BITS 
OTHER LIMITATION (S) : 

(3) ALGORITHM NAME: RC5 

EXEMPTION MECHANISM : 

MAX KEY SIZE: 64 BITS 

OTHER LIMITATION (S) : 10 ROUNDS 



EXEMPT SET 



(1) ALGORITHM NAME: BLOWFISH 

EXEMPTION MECHANISM : KEY RECOVERY 
MAX KEY SIZE : 256 BITS 
OTHER LIMITATION (S) : 

(2) ALGORITHM NAME: BLOWFISH 

EXEMPTION MECHANISM : KEY ESCROW 
MAX KEY SIZE : 256 BITS 
OTHER LIMITATION (S) : 
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DETERMINE THE 
CALLING 
APPLICATION 



•604 




DETERMINE 
RESTRICTIONS 
BASED UPON 

EXEMPT 
LIMITATIONS 
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RETURN 
RESTRICTIONS 
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DEFAULT 
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RETURN 
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SELECT NEXT ENTRY IN POLICY A 
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DOES 
POLICY B HAVE A 
CORRESPONDING 
ENTRY 



YES 
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NO 



820- 



DETERMINE MOST RESTRICTIVE 
LIMITATIONS BY COMPARING 
A-ENTRY AND B-ENTRY 




NO 



YES 



816 



DETERMINE MOST RESTRICTIVE 
LIMITATIONS BY COMPARING 
A-ENTRY AND B-WILDCARD 



CREATE NEW ENTRY IN 
MERGED POLICY C 
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FROM 828 



TO 828 



5437-106 
+ 



TO 804 




> 


848 


DETERMINE MOST RESTRICTIVE 
LIMITATIONS BY COMPARING 
B-ENTRY AND A-WILD CARD 
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CREATE NEW ENTRY IN 
MERGED POLICY C 




YES 
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DETERMINE WHICH 
DIGITAL SIGNATURE 
TO SUBMIT 



904 



SUBMIT THE 
SELECTED DIGITAL 
SIGNATURE AND 
KEY(S) 



908 



RECEIVE RESPONSE 



SIGNATURE 
MECHANISM 
IS LEGITIMATE 



912 



NO 




932 



(^TERMINATE ^ 936 



SIGNATURE 
MECHANISM IS 
NOT LEGITIMATE 



x 920 




TERMINATE 



924 
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DETERMINE WHICH 
INFORMATION SET 
TO SUBMIT 



/1004 



SUBMIT THE 
SELECTED INFORMATION 

SET TO THE 
UNTRUSTED MECHANISM 



^1008 



RECEIVE RESPONSE 
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1012 



NO 



UNTRUSTED 
MECHANISM 
IS LEGITIMATE 
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NO 
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1036 



UNTRUSTED 
MECHANISM IS 
NOT LEGITIMATE 
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